IN THE CLAIMS 

1. (Currently Amended) A system for identifying users of a plurality of computers within 
[[a]] fin Qtgmiafldonla communications network, comprising: 

a database storing directory information for a plurality of users authorized to use the 
plurality of computers within the communications network; 

a name discovery apparatus fry Attracting internet Protocol and electronic mn\\ fwlrinrnffiff, 

having at least one connection to a primary switch in the communications network for capturing 
inbound and outbound electronic mail traffic; and 

a server, connected to said name discovery apparatus and having access to said database 
via the communications network, said server having a server process capable of joining said 
inbound and outbound electronic mail traffic captured by said name discovery apparatus and said 
directory information stored in said database, t hereb y identifying wherein which of said plurality 
of users is using which of the plurality of computers jg Vfcntififfd 

2. (Original) The system of Claim 1, wherein the communications network is a local area 
network. 

3. (Original) The system of Claim 2, wherein said local area network is an Ethernet 
network. 

4. (Original) The system of Claim 1, wherein the communications network is a wide area 
network. 

5. (Currently Amended) The system of Claim 1, further comprising: 

a central repository, accessible by said name discovery apparatus and [[said]] a Web 
server, for storing said inbound and outbound electronic mail traffic captured by said name 
discovery apparatus. 
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6. (Original) The system of Claim 1, wherein said database is an ITU-T X.500 formatted 
database. 

7. (Original) The system of Claim 1» wherein said database contains at least one of the 
following fields of data relating to said plurality of users: (T) First Name; (ii) Last Name; (iii) 
Middle Initial; (iv) Nick Names; (v) Name Aliases; (vi) Building; (vii) Room; (viii) Permanent 
E-mail; (ix) Temporary E-mail; (x) User Name; (xi) E-mail Address; and (xii) 
Affiliation/Organization. 

8. (Original) The system of Claim 1, wherein said server process is a Web server process 
capable of responding to browser-based queries to identify which of said plurality of users is 
using which of the plurality of computers. 

9. (Original) The system of Claim 1, wherein said inbound and outbound electronic mail 
traffic captured by said name discovery apparatus includes at least one of the following: (I) POP 
electronic mail traffic; (ii) IMAP electronic mail traffic; and (iii) SMTP electronic mail traffic. 

10. (Currently Amended) A method for identifying users of a plurality of computers 
within [[a]] an fn ¥* W iat fo n> * communications network, the method comprising the steps of: 

capturing inbound and outbound electronic mail traffic from at least one primary switch 
in the communications network; 

extracting Internet Protocol addresses and electronic mail addresses from said 
captured inbound and outbound electronic mail traffic; 

accessing a database of directory information for a plurality of users authorized to use the 
plurality of computers within the communications network, said database comprising a plurality 
of electronic mail addresses, each corresponding to one of said plurality of users; and 



joining said extracted electronic mail addresses with said plurality of electronic mail 
addresses stored in said database, thereby mapping a subset of said extracted Internet Protocol 
addresses to a subset of said plurality of users; 

wherein which of t he plurality of users is using which of the plurality of computers is 
identified, 

11. (Original) The method of Claim 10, further comprising the step of: 

storing said extracted Internet Protocol addresses and electronic mail addresses in a 
central repository. 

12. (Original) Hie method of Claim 1 1, further comprising the steps of: 
accessing said central repository; and 

producing a data file, on a pre-determined time interval, said data file containing 
information on which of said plurality of users used which of the plurality of computers during 
said pre-determined time interval. 

13. (Original) The method of Claim 10, wherein said extracting step comprises the step 

of: 

using pattern matching based upon a known electronic mail protocol to extract said 
Internet Protocol addresses and said electronic mail addresses from said captured inbound and 
outbound electronic mail traffic. 

14. (Original) The method of Claim 13, wherein said known electronic mail protocol is 
one of the following protocols: (0 POP; (ii) IMAP; and (iii) SMTP. 

15. (Original) The method of Claim 10, wherein the communications network is a local 
area network. 

1 6. (Original) The method of Claim 1 5, wherein said local area network is an Ethernet 
network. 



17. (Original) The method of Claim 10, wherein the communications network is a wide 
area network. 

18. (Original) The method of Claim 10, wherein said database is an ITU-T X.S00 
formatted database. 

19. (Original) The method of Claim 10, further comprising the step of: 
receiving, via the communications network, a query to identify a user of one of the 

plurality of computers within the communications network, said query including an Internet 
Protocol address; and 

responding to said query using said mapping of said subset of said extracted Internet 
Protocol addresses to said subset of said plurality of users and using said received Internet 
Protocol address. 

20. (Original) The method of Claim 10, wherein said database further comprises at least 
one of the following fields of data for each of said plurality of users: (I) First Name; (ii) Last 
Name; (iii) Middle Initial; (iii) Nick Names; (iv) Name Aliases; (v) Building; (vi) Room; (vii) 
User Name; and (viii) Affiliation/Organization. 

21. (Original) The method of Claim 20, further comprising the step of: 
receiving, via the communications network, a query to identify a user of one of the 

plurality of computers within the communications network, said query including at least one of 
said fields of data; and 

responding to said query using said mapping of said subset of said extracted Internet 
Protocol addresses to said subset of said plurality of users and using said received at least one of 
said fields of data. 

22. (Currently Amended) A computer program product comprising a computer usable 
medium having control logic stored therein for causing a computer to identify users of a plurality 
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of terminals within [[a]] «p nrBPfliffittiftTTft communications network, said control logic 
comprising: 

first computer readable program code means for causing the computer to capture inbound 
and outbound electronic mail traffic from at least one primary switch in the communications 
network; 

second computer readable program code means for causing the computer to extract 
Internet Protocol addresses and electronic mail addresses from said captured inbound and 
outbound electronic mail traffic; 

third computer readable program code means for causing the computer to access a 
database of directory information for a plurality of users authorized to use the plurality of 
terminals within the communications network, said database comprising a plurality of electronic 
mail addresses, each corresponding to one of said plurality of users; and 

fourth computer readable program code means for causing the computer to join said 
extracted electronic mail addresses with said plurality of electronic mail addresses stored in said 
database, thereby mapping a subset of said extracted Internet Protocol addresses to a subset of 
said plurality of users; 

wherein which of the plurality of users is using which of the plurality of computers is 

identified* 

23. (Original) The computer program product of Claim 22, further comprising: 
fifth computer readable program code means for causing the computer to store said 

extracted Internet Protocol addresses and electronic mail addresses in a central repository. 

24. (Original) The computer program product of Claim 23, further comprising: 
sixth computer readable program code means for causing the computer to access said 

central repository; and 
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seventh computer readable program code means for causing the computer to create a data 
file, on a pre-detennined time interval, said data file containing information on which of said 
plurality of users used which of the plurality of terminals during said pre-detennined time 
interval. 

25. (Original) The computer program product of Claim 22, wherein said second 
computer readable program code means comprises: 

fifth computer readable program code means for causing the computer to perform pattern 
matching based upon a known electronic mail protocol to extract said Internet Protocol addresses 
and said electronic mail addresses from said captured inbound and outbound electronic mail 
traffic. 

26. (Original) The computer program product of Claim 25, wherein said known 
electronic mail protocol is one of the following protocols: (I) POP; Qi) IMAP; and (iii) SMTP. 

27. (Original) The computer program product of Claim 22, wherein said database is an 
ITU-T X.500 formatted database. 

28. (Currently Amended) The computer program product of Claim 22, further 
comprising: 

fifth computer readable program code means for causing the computer to receive, via the 
communications network, a query to identify a user of one of the plurality of terminals within the 
communications network, said query including an Internet Protocol address; and 

sixth computer readable program code means for causing the computer to respond to said 
query using said mapping of said subset of said extracted Internet Protocol addresses to said 
subset of said plurality of users and using [[said]] & received Internet Protocol address. 

29. (Original) The computer program product of Claim 22, wherein said database further 
comprises at least one of the following fields of data for each of said plurality of users: (I) First 



Name; (ii) Last Name; (iii) Middle Initial; (iii) Nick Names; (iv) Name Aliases; (v) Building; (vi) 
Room; (vii) User Name; and (viii) Affiliation/Organization. 

30. (Currently Amended) The computer program product of Claim 29, further 
comprising: 

fifth computer readable program code means for causing the computer to receive, via the 
communications network, a query to identify a user of one of the plurality of terminals within the 
communications network, said query including at least one of said fields of data; and 

sixth computer readable program code means for causing the computer to respond to said 
query using said mapping of said subset of said extracted Internet Protocol addresses to said 
subset of said plurality of users and using [[said]] & received at least one of said fields of data. 
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